Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a629dec3-c703-33d4-8b20-ff5c9f28a133.roa
File: a629dec3-c703-33d4-8b20-ff5c9f28a133.roa (raw, json)
Hash identifier: SjfDKIIFc37SdLQO28/0VZXAPTJKjKMjR9KA8aZulhc=
Subject key identifier: 76:1D:6A:91:0A:3A:7B:00:40:BC:F8:F5:30:5B:D4:F2:90:5D:61:F2
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6E0AB3CB0CC498858480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a629dec3-c703-33d4-8b20-ff5c9f28a133.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.96.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6e:0a:b3:cb:0c:c4:98:85:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=84e6a026-dc34-4088-8e84-7ae7257e155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:21:e8:bc:3f:ce:9f:34:d9:2b:84:f1:41:
36:2b:14:21:30:4a:4f:36:3e:1a:25:2c:76:9e:4f:
b4:85:0e:36:ae:f3:1f:8c:01:dc:45:3b:90:27:43:
66:cc:c5:ce:f6:72:9f:c8:1c:bc:d5:1d:c1:46:55:
d1:f6:7d:ba:1b:37:ca:31:26:ff:3e:38:f9:21:ca:
42:f1:10:cd:44:3f:41:fc:59:ef:80:02:75:82:2e:
95:7c:21:1a:2e:26:51:e1:b6:d5:db:da:e8:43:b5:
b3:32:94:6c:a8:22:06:84:dc:11:74:a6:90:72:93:
7f:bd:e6:e1:12:9c:b8:52:46:15:2d:f3:d9:f8:d5:
2b:a7:21:b8:39:fc:3c:16:03:1c:eb:55:c1:e6:cc:
26:44:39:c7:ce:c7:11:4a:a9:03:8c:6c:86:b8:ac:
8b:c2:c5:df:14:fc:1a:60:32:42:a1:20:4b:c3:e2:
5a:45:3a:7c:64:62:3f:4c:30:0e:30:b6:e5:31:36:
5e:81:e3:5f:e1:a0:5c:be:75:13:78:1e:0b:f5:f8:
3a:85:4b:52:30:bb:ac:ad:c7:0c:f5:6a:54:b6:c9:
fa:7a:fd:fd:57:ff:7a:36:2a:5d:dd:16:2b:51:e9:
99:3b:d5:0a:d7:65:1a:90:22:4b:cf:22:50:fd:79:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:6A:91:0A:3A:7B:00:40:BC:F8:F5:30:5B:D4:F2:90:5D:61:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a629dec3-c703-33d4-8b20-ff5c9f28a133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.96.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1c:28:c5:c9:a3:09:d5:c7:14:ac:2b:8b:f5:57:d6:62:25:
7e:6e:b0:4f:a6:27:9c:a1:a5:4c:81:78:fa:39:95:2f:5e:ee:
a2:05:16:7b:c1:69:24:06:a3:9a:be:81:99:6f:ea:96:22:2b:
e7:e0:ff:20:2b:82:86:16:1a:17:4a:c4:03:e6:44:fe:ed:dc:
4c:5b:c1:06:a6:9b:25:91:1a:18:05:78:f7:c0:de:77:cb:1e:
34:6a:0d:cb:77:d4:0c:95:ad:7e:1b:2c:27:d4:0c:ea:38:cd:
14:2c:38:68:3f:da:4b:8f:ed:bd:79:f2:03:a1:b7:f8:90:8d:
dd:68:83:38:2d:3c:48:fd:7d:4d:32:94:47:67:af:d7:89:08:
cd:2f:9f:a1:38:b6:21:82:47:a8:bf:f8:55:e8:72:eb:77:f5:
53:b2:c2:6d:e2:44:1c:46:f7:1b:36:b2:42:76:9f:3d:20:d0:
a7:0b:28:2c:41:99:14:36:1c:25:08:f7:85:1d:5d:95:89:06:
f5:65:d6:18:cc:ba:49:28:fd:07:b8:b9:d8:28:a9:fb:42:52:
64:6b:f1:ff:4e:a2:72:1f:ca:fb:87:30:18:c7:1b:c0:5e:22:
5a:c5:48:0f:f4:a4:fd:d1:15:ed:a5:a4:e0:f4:92:30:49:3b:
a4:db:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:51:47 2025 by rpki-client